VYPR
← All advisories
High severity7.3NVD Advisory· Published Sep 16, 2025· Updated Jul 5, 2026

CVE-2025-56295

CVE-2025-56295

Description

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Carmelo/Computer Laboratory System2 versions
    cpe:2.3:a:carmelo:computer_laboratory_system:1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:carmelo:computer_laboratory_system:1.0:*:*:*:*:*:*:*
    • (no CPE)range: = 1.0
  • code-projects/Computer Laboratory Systemdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.